Privacy and Security

UOB Group Internet Banking Privacy Practices

The United Overseas Bank Group (UOB Group) is committed to maintaining best Privacy Practices to create, as far as possible, a secure Internet banking environment for our customers. We encourage our customers to similarly observe best practices that are within their control.

Our best practices include:

1. Collection of Customer Information
   We will not make unsolicited requests for customer information through email or the telephone, unless customers initiate contact with us. We will use any information collected as minimally as possible, mainly to assist us in customising and delivering services and products that are of interest to our customers. Under no circumstances will we ask customers to reveal their Personal Identification Numbers (PINs) or Passwords.
   
   
2. Handling of Customer Information
   We have established strict confidentiality standards for safeguarding information on our customers.
   
   
3. Disclosure of Customer Information
   Unless we have the customer's agreement or are required by law, we will not disclose customer information to external parties.
   
   
4. Compliance by External Parties
   External parties who, in the course of providing support services to us, may come into contact with customer information, are required to observe our privacy standards.

UOB Group Internet Security Technology

We understand customer concerns for security when they transact over the Internet. We have therefore built a security system for online banking that safeguards the confidentiality of our customers' account information and their banking transactions.

We employ several different methods to protect customers’ account and personal information: 

1. Firewalls
   We have multiple levels of firewalls in place between our internal computer systems and the Internet.
   
   
2. Encryption
   Strong encryption protects customer information as it travels over the Internet. We use the 128-bit Secure Sockets Layer (SSL) encryption to protect the confidentiality of customers' account details and transaction data. This 128-bit SSL encryption is the commercially available security protocol for encrypting or scrambling data transmitted over the Internet. It is also currently recognised internationally to be of the highest standard in encryption technology commercially available and is generally adopted by banks in Singapore and financial institutions worldwide.
   
   
3. Username and Password
   Only your valid Username and Password which identify you uniquely, will allow you to log in to our secure website(s). This ensures that messages from authorised users only are admitted into our secure site(s).
   
   
4. Technology Devices
   UOB may, from time to time, issue Devices and/or establish security procedures that you may need to execute in order to use certain UOB Internet Banking services related to the Devices.
   
   You may use the Devices (whether or not in conjunction with the Username and/or Password or otherwise):
   • To initiate, effect, perform and/or dispatch any instruction or any communication to UOB;
   • To obtain or utilise any service that may be offered or made available by UOB through the Website or UOB Internet Banking service;
   • To access and obtain information as may be permitted by UOB (whether relating to your Account(s), service or otherwise); and
   • To effect any transaction with UOB which may be made available by UOB, subject to the terms of this Agreement and to other restrictions, limitations, terms and conditions of UOB then applicable
     
     
5. Automatic Log Out
   As an additional security measure, our system may log you out of your Internet banking session after a period of inactivity.

We are committed to monitoring our Internet security system constantly for potential situations that could compromise the security or the privacy of our customers and to exploring new technology continually to enhance our Internet security system.

Your Role in Safeguarding Your Personal Data and Account Information

You are responsible for keeping your online Password confidential. Failure to do so exposes you to the risks of fraud and loss. The UOB Group cannot be responsible for losses suffered by customers as a result of:

• Input errors or misuse of its Internet banking services;
• Negligent handling or sharing of Password;
• Leaving a computer unattended during an online session;
• Failure to immediately report known incidents of unauthorised account access.

FURTHER INFORMATION ON THE LIMITS OF OUR LIABILITY TO YOU IN PROVIDING INTERNET BANKING SERVICES CAN BE FOUND IN THE FOLLOWING TERMS AND CONDITIONS:

• UOB Personal Internet Banking
• Business Internet Banking
• UOB COE Open Bidding

We strongly recommend that you observe the following best privacy and security practices at all times: 

1. Managing Your Username and Password
   • Your Username and Password identify you when you use our Internet banking services. If any of these becomes invalid or ceases to have effect, it is imperative that you inform us by calling the direct hotlines for the respective services.
   • Ensure that no one can see your Password when you log in to our system.
   • Ensure that you keep your Password confidential at all times and do not divulge it to anyone.
   • Do not allow anyone (without exception) to use your Username and Password, as you are responsible for all transactions undertaken with your Username and Password.
   • Do not base your Password on your Username or personal information such as your telephone number, birth date or the like.
   • Memorise your Password and do not record it anywhere.
   • Change your Password regularly.
   • Do not use the same character more than twice for your Password.
   • Do not recycle your recently used Password.
   • Change your Password IMMEDIATELY if you suspect that someone knows it.
   • The same Password should not be used for different websites, applications or services particularly when they relate to different entities.
   • Do not select the option on your browser for storing or retaining user name and password.
   
   Note: No staff members of the UOB Group should ever ask you for your Password for whatsoever reasons.
   
   
2. Use of Technology Devices
   • Do not allow anyone (without exception) to keep, use or tamper with your Technology Devices, as you are responsible for all transactions undertaken
   • Do not reveal the One-Time Password (OTP) generated by your Technology Devices to anyone
   • Do not divulge the serial number of your Token-OTP Device
   • Notify the Bank if your Technology Device is lost or fails to function as intended
   • Ensure that the Device is kept safely
     
     
3. Take Precautions Against Your Password Keystrokes Being Captured
   Exercise the necessary precautions to protect your personal computer against viruses and other malicious programs. Aside from damaging and/or destroying data, viruses and malicious programs can capture your Password keystrokes and other personal information and send them to another person without your consent.
   
   Precautions that you can take include the following:
   
   
   • Ensure that you install an effective personal firewall as well as anti-virus and anti-Trojan horse softwares. These should be updated regularly.
   • Do not download any software from a web site that is of doubtful origin.
   • Do not open any e-mail or attachment that is from a source unknown to you. When in doubt, delete such e-mail without opening it.
     
     
4. Log In Directly
   If you wish to access a website belonging to UOB or its subsidiaries or associates, always personally and directly enter the relevant website address in the browser address bar. Do not login via any hyperlink within emails.
   
   A list of the relevant website addresses is set out below for your reference. If you encounter suspicious email or fraudulent websites passing off as websites of UOB or its subsidiaries or associates, please notify us immediately at 603 - 27321181 or email us.
   
   List of UOB Group Websites
   
   

   UOB Group Site	URL
   UOB Global Site	http://www.uobgroup.com
   UOB Singapore	http://www.uob.com.sg
   UOB Hong Kong	http://www.uob.com.hk
   UOB Taipei	http://www.uob.com.tw
   United Overseas Bank (Malaysia)	http://www1.uob.com.my
   UOB Thailand	http://www.uob.co.th
   UOB Asset Management	http://www.uobam.com.sg
   UOB Asset Management (Taiwan)	http://www.uobam.com.tw
   UOB Asset Management – UOB Asset Management (Thai)	http://www.uobam.co.th
   UOB Life Assurance	http://www.uoblife.com.sg
   United Overseas Insurance	http://www.uoi.com.sg
   UOB Travel Planners	http://www.uobtravelplanners.com
   UOB-Kay Hian	http://www.uobkayhian.com

5. Remember to Log Out
   Always remember to log out of your Internet banking session when you have completed your Internet banking transactions or even when you need to walk away from your computer even for just a minute. Do not leave your computer unattended while Internet transactions are being processed.
   
   
6. Clear Your Browser's Cache
   Default files on a computer, sometimes called 'cache' files, can retain images of data sent or received over the Internet, making them a potential target for a system intruder. Therefore, we strongly advise that you clear your browser's disk cache after each Internet banking session.
   
   How to Clear Your Cache (Navigator 4.X)
   • Select 'Edit' from the Menu bar
   • Select 'Preferences'
   • Expand 'Advanced' to show 'Cache'
   • Select 'Cache'
   • Click the 'Clear Disk Cache' button and answer 'OK'
   • Click the 'Clear Memory Cache' button and answer 'OK'
   • Click 'OK' to exit the dialog box
   
   How to Clear Your Cache (Internet Explorer 4.X/5)
   • Select 'View' from the Menu bar (if you are using IE 4.X)
     OR
   • Select 'Tools' from the Menu bar (if you are using IE 5)
   • Select 'Internet Options'
   • Select 'General' tab
   • Click the 'Delete Files' button under Temporary Internet Files and answer 'OK'
   • Click 'OK' to exit the dialog box
     
     
7. Avoid Sharing Personal Computers (PCs)
   Avoid using shared PCs or public PCs such as those found in cyber cafes to perform Internet banking transactions. If there is a need to do so, always satisfy yourself thoroughly that the PCs are free from viruses and be sure to clear the browser's cache upon completion of your transactions.
   
   
8. Update Your Browsers
   You should update your browsers and application software to support 128-bit SSL encryption or a higher encryption standard.
   
   
9. Verify the Authenticity of the UOB Group Internet Banking/Transaction Web Site(s)
   We provide a Secure Zone icon (as symbolised by a 'padlock' icon) within our Internet banking/transaction web pages for your verification of its authenticity.
   
   To verify the authenticity of the UOB Group Internet banking/transaction web site(s), look for the Secure Zone icon on the web page, click it, and ensure that 'United Overseas Bank Ltd' is displayed as a part of UOB's VeriSign Secure Server ID from https://digitalid.verisign.com.
   
   There are two ways by which you can verify that you are logging in to a secure web page:
   
   1. Check that the UOB Group Internet banking/transaction web site address changes from http:// to https:// and that a security icon (as symbolised by a lock or key) appears at the bottom status bar of the browser. This indicates that the web page that you are online with uses encryption technology. You can double click the security icon to view information pertaining to the security certificate for the web page.
      
      
   2. Depending on the browser that you are using, you can also verify that you are in a secure web page by doing the following:
      On Internet Explorer
      Point the mouse on the web page and right click the mouse. Scroll to 'Properties' and click the mouse. Ensure that the following information appears in the 'Properties' dialogue box shown on the screen:
      Protocol: Hyper Text Transfer Protocol with Privacy
      Connection: SSL 3.0, RC4 with 128 bit encryption (High); RSA with 1024 Bit Exchange
      Address (URL): The url should start with 'https://'
      On Netscape
      Point the mouse on the web page and right click the mouse. Scroll to 'View Frame Info' and click the mouse. Ensure that the following information appears on the display screen:
      Location: The location should start with 'https://'
      Security: This is a secure document that uses a high-grade encryption key for U.S. domestic use only (RC4, 128 bit)
      Certificate: This Certificate belongs to …United Overseas Bank Ltd…
      
      
10. Inform Us Immediately of Suspected Invasion of Your Privacy or of Unauthorised Transactions
    If you suspect that your privacy has been invaded or that your account(s) has/have been accessed by unauthorised persons, please change your Password immediately and contact us by calling the direct hotlines for the respective services. Check your account statements to see if any transaction has been performed without your authorisation. Should there be any unauthorised or unusual transactions, please notify us immediately.
    
    You should check your account statements regularly and notify us promptly of any errors. At the minimum, you should check your account statements at least once at the beginning of each month.
    
    Bank accounts
    If you object to any entry or omission in your bank account statement in respect of any calendar month, you must inform the Bank in writing within 14 days of the date from which the full statement for that calendar month is made available on UOB Personal Internal Banking. Failure to do so shall imply your acceptance of the account statement and the correctness of the account statement.
    
    

    Online Service	Contact Number	Address
    UOB Asset Management (Malaysia) Berhad (219478-X)	General Line: 603 - 27321181	Level 22, Vista Tower, The Intermark 348, Jalan Tun Razak, 50400 Kuala Lumpur, Malaysia

    
    
    
11. E-Mail Security
    As information submitted via email is not encrypted during transmission, it is important that you do not give your account or credit card number nor convey any confidential information or banking or other instructions in your enquiries and/or comments.
    
    If you encounter any suspicious email, passing off as an email from UOB Group, please notify us immediately.
    
    
12. Additional Recommended Good Practices to Safeguard Your Online Security
    
    • Remove file and printer sharing in your computer, especially when you have Internet access via cable modem, broadband connection or a similar set-up.
    • Make regular backup of critical data.
    • Consider the use of encryption technology to protect highly sensitive data.
    • Do not install junk software or run programs of unknown origin.
    • Delete junk or chain emails.
    • Do not open email attachments from strangers.
    • Do not disclose personal, financial or credit card information to little-known or suspect websites.
    • Do not use a computer or device which cannot be trusted

At the UOB Group, we are committed to providing you with responsive customer service. When we receive any customer complaint, our priority is to attend to it as expeditiously as possible. 

Customer Choices in the Event of Unavailability of the UOB Group Internet Banking/Transaction Website(s)

Should the UOB Group Internet banking/transaction website(s) be unavailable, customers can choose to do their banking/transactions via the following alternative channels:

English Version to Prevail

If there are differences in meaning between the English version and any translation of any terms and conditions, the English version shall prevail.